Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xeUq_ty365KlhUj0ad_PkNeavHU.roa
File: xeUq_ty365KlhUj0ad_PkNeavHU.roa (raw, json)
Hash identifier: SD8M7O+ByWJoNIi17kc/0YF2byyo/C5S5r9XkbPIyNs=
Subject key identifier: C5:E5:2A:FE:DC:B7:EB:92:A5:85:48:F4:69:DF:CF:90:D7:9A:BC:75
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 19156854
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xeUq_ty365KlhUj0ad_PkNeavHU.roa
Signing time: Fri 11 Mar 2022 01:04:38 +0000
ROA not before: Fri 11 Mar 2022 01:04:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 91.189.184.0/24 maxlen: 24
77.83.158.0/24 maxlen: 32
91.189.185.0/24 maxlen: 24
77.83.156.0/24 maxlen: 32
85.209.253.0/24 maxlen: 24
77.243.95.0/24 maxlen: 32
77.243.93.0/24 maxlen: 32
193.16.9.0/24 maxlen: 32
185.117.20.0/23 maxlen: 32
5.253.138.0/24 maxlen: 32
194.36.101.0/24 maxlen: 24
185.238.241.0/24 maxlen: 24
147.78.221.0/24 maxlen: 32
185.238.240.0/24 maxlen: 24
185.133.75.0/24 maxlen: 32
185.141.205.0/24 maxlen: 24
185.214.70.0/24 maxlen: 24
45.153.168.0/24 maxlen: 32
213.232.107.0/24 maxlen: 32
45.151.172.0/23 maxlen: 32
185.166.237.0/24 maxlen: 24
185.211.49.0/24 maxlen: 24
45.14.44.0/24 maxlen: 32
45.14.45.0/24 maxlen: 32
185.207.178.0/24 maxlen: 24
79.174.23.0/24 maxlen: 32
79.174.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420833364 (0x19156854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 11 01:04:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5e52afedcb7eb92a58548f469dfcf90d79abc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:4a:3e:84:b4:82:f1:f6:8a:19:a1:50:42:
1a:a4:b3:a6:18:ef:ff:cb:60:c0:ce:2d:65:53:e6:
46:cd:dd:34:5f:8e:ca:30:a7:d1:a2:a8:c7:ec:50:
5c:97:f0:b6:f3:5d:bf:f0:df:17:c9:a2:a7:74:a9:
e8:ba:54:10:43:02:2e:6b:fd:22:e2:d4:e8:33:40:
67:cb:f0:e9:e5:54:2a:65:70:db:98:ee:28:ea:ba:
fd:a7:0b:58:d8:03:3b:b7:7b:05:41:43:ab:28:83:
6b:08:57:18:5f:ad:d9:05:04:ba:60:2d:bc:d7:0d:
bf:b6:c1:50:64:80:90:ab:98:d8:fc:67:98:09:60:
4d:9e:ab:84:1b:d2:89:19:5d:d8:9b:96:b2:d6:91:
a3:4d:10:ed:b8:65:ee:4c:b8:04:0f:64:2a:88:af:
42:1c:16:38:66:68:b0:88:d2:ed:42:cf:b0:9b:4a:
ba:4b:e8:31:15:c9:29:f2:98:23:75:72:65:ac:6e:
ad:7c:d9:2a:e7:be:2a:87:7b:37:0e:6f:d9:b1:e1:
39:5c:ed:11:81:63:50:2f:28:60:82:64:15:19:b8:
1f:61:64:f1:ca:eb:d2:29:1a:6f:05:bd:7d:4a:b3:
10:4d:53:b3:f1:28:f0:77:fc:03:1b:95:0e:a8:77:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E5:2A:FE:DC:B7:EB:92:A5:85:48:F4:69:DF:CF:90:D7:9A:BC:75
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xeUq_ty365KlhUj0ad_PkNeavHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.138.0/24
45.14.44.0/23
45.151.172.0/23
45.153.168.0/24
77.83.156.0/24
77.83.158.0/24
77.243.93.0/24
77.243.95.0/24
79.174.21.0/24
79.174.23.0/24
85.209.253.0/24
91.189.184.0/23
147.78.221.0/24
185.117.20.0/23
185.133.75.0/24
185.141.205.0/24
185.166.237.0/24
185.207.178.0/24
185.211.49.0/24
185.214.70.0/24
185.238.240.0/23
193.16.9.0/24
194.36.101.0/24
213.232.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fe:d1:f2:8f:62:dd:e8:11:50:97:a6:c7:84:06:20:a5:ab:
e2:fe:a2:7e:53:79:04:45:13:d4:c8:a2:74:59:ac:ce:4f:b2:
4e:26:98:6a:8c:7c:fe:7a:27:52:16:89:f4:7d:65:a5:c1:fd:
06:51:21:90:3a:c8:80:64:5e:bb:77:9f:59:58:a1:25:bd:08:
fc:31:f7:bd:c4:fc:16:cb:1a:23:7b:f1:c1:d8:a7:dd:b7:3f:
3a:66:e7:61:d9:a9:42:9c:f2:83:54:c3:07:f1:75:13:94:b3:
e3:90:93:a6:33:ef:ce:fe:79:52:e3:f4:8c:af:d4:f1:fc:33:
4b:0a:a1:32:89:8c:11:ba:e3:29:e0:a3:49:95:19:d6:53:b0:
f8:15:7b:be:a6:a2:c2:d0:12:68:0a:8e:1d:89:c2:54:a8:e1:
17:e5:af:9d:23:e0:fa:c5:1c:9a:40:46:af:8d:c6:1c:fc:53:
dd:cc:b1:ed:06:ff:56:4a:99:24:2c:25:7d:0d:90:df:91:43:
7c:ab:7d:cb:92:6a:00:29:a9:c7:35:3f:68:45:36:84:29:dc:
8d:b0:cd:d4:e5:a6:47:2b:c3:08:8f:33:af:c2:fe:ee:5c:b1:
58:5f:c9:5c:70:f6:e2:22:5f:da:07:6a:4f:3f:1d:85:87:05:
9f:50:93:cf
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIEGRVoVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDMx
MTAxMDQzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzVlNTJhZmVkY2I3
ZWI5MmE1ODU0OGY0NjlkZmNmOTBkNzlhYmM3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKX+Sj6EtILx9ooZoVBCGqSzphjv/8tgwM4tZVPmRs3dNF+O
yjCn0aKox+xQXJfwtvNdv/DfF8mip3Sp6LpUEEMCLmv9IuLU6DNAZ8vw6eVUKmVw
25juKOq6/acLWNgDO7d7BUFDqyiDawhXGF+t2QUEumAtvNcNv7bBUGSAkKuY2Pxn
mAlgTZ6rhBvSiRld2JuWstaRo00Q7bhl7ky4BA9kKoivQhwWOGZosIjS7ULPsJtK
ukvoMRXJKfKYI3VyZaxurXzZKue+Kod7Nw5v2bHhOVztEYFjUC8oYIJkFRm4H2Fk
8crr0ikabwW9fUqzEE1Ts/Eo8Hf8AxuVDqh3ma0CAwEAAaOCApgwggKUMB0GA1Ud
DgQWBBTF5Sr+3LfrkqWFSPRp38+Q15q8dTAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L3hlVXFfdHkzNjVLbGhVajBhZF9Qa05lYXZIVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
rQYIKwYBBQUHAQcBAf8EgZ0wgZowgZcEAgABMIGQAwQABf2KAwQBLQ4sAwQBLZes
AwQALZmoAwQATVOcAwQATVOeAwQATfNdAwQATfNfAwQAT64VAwQAT64XAwQAVdH9
AwQBW724AwQAk07dAwQBuXUUAwQAuYVLAwQAuY3NAwQAuabtAwQAuc+yAwQAudMx
AwQAudZGAwQBue7wAwQAwRAJAwQAwiRlAwQA1ehrMA0GCSqGSIb3DQEBCwUAA4IB
AQAN/tHyj2Ld6BFQl6bHhAYgpavi/qJ+U3kERRPUyKJ0WazOT7JOJphqjHz+eidS
Fon0fWWlwf0GUSGQOsiAZF67d59ZWKElvQj8Mfe9xPwWyxoje/HB2Kfdtz86Zudh
2alCnPKDVMMH8XUTlLPjkJOmM+/O/nlS4/SMr9Tx/DNLCqEyiYwRuuMp4KNJlRnW
U7D4FXu+pqLC0BJoCo4dicJUqOEX5a+dI+D6xRyaQEavjcYc/FPdzLHtBv9WSpkk
LCV9DZDfkUN8q33LkmoAKanHNT9oRTaEKdyNsM3U5aZHK8MIjzOvwv7uXLFYX8lc
cPbiIl/aB2pPPx2FhwWfUJPP
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org